DMS Operations

Create, read, update, and delete Device Management Service instances

Get DMS Statistics

Retrieve statistics about DMS instances with optional filtering.

filter · string

Filter expression to get statistics for specific DMS instances (e.g., name[eq]production, metadata.region[eq]us-east-1)

Response

total · integer

Total number of DMS instances matching the filter

Example Request

curl -X GET "https://api.lamassu.io/api/dmsmanager/v1/v1/stats?filter=name[contains]prod" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN"

Example Response

{
  "total": 42
}

---

List DMS Instances

Retrieve a paginated list of all DMS instances.

Query Parameters

page_size · integer · default: "25"

Number of results per page

bookmark · string

Bookmark for pagination to retrieve the next page

sort_by · string

Field name to sort by (e.g., name, creation_ts)

sort_mode · string

Sort order: asc or desc

filter · string

Filter expression for DMS instances

Response

next · string

Bookmark for the next page of results

list · array

Array of DMS objects

Show DMS Object

id · string

DMS unique identifier

name · string

Human-readable name

metadata · object

Custom metadata key-value pairs

creation_ts · string

Creation timestamp

settings · object

DMS configuration settings including enrollment, re-enrollment, and CA distribution settings

Example Request

curl -X GET "https://api.lamassu.io/api/dmsmanager/v1/v1/dms?page_size=10&sort_by=name&sort_mode=asc" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN"

---

Create DMS

Create a new DMS instance with enrollment configuration.

Request Body

id · string

Unique identifier for the DMS (optional, will be generated if not provided)

name · string · required

Human-readable name for the DMS

metadata · object

Custom metadata key-value pairs

settings · object · required

DMS configuration settings

Show Settings Object

settings.issuance_profile_id · string

ID of the issuance profile to use for certificate generation

settings.enrollment_settings · object

Configuration for device enrollment

Show Enrollment Settings

protocol · string

Enrollment protocol: EST_RFC7030

enrollment_ca · string

CA identifier for enrollment certificates

registration_mode · string

Registration mode: JITP (Just-In-Time Provisioning) or PRE_REGISTRATION

verify_csr_signature · boolean

Whether to verify CSR signature

enable_replaceable_enrollment · boolean

Allow enrollment certificate replacement

settings.reenrollment_settings · object

Configuration for certificate re-enrollment

Show Re-enrollment Settings

reenrollment_delta · string

Time window before expiration when re-enrollment is allowed

preventive_delta · string

Preventive re-enrollment window

critical_delta · string

Critical re-enrollment window

enable_expired_renewal · boolean

Allow renewal of expired certificates

revoke_on_reenrollment · boolean

Revoke old certificate when re-enrolling

settings.server_keygen_settings · object

Server-side key generation configuration

Show Server KeyGen Settings

enabled · boolean

Enable server-side key generation

key.type · string

Key algorithm type (e.g., RSA, ECDSA)

key.bits · integer

Key size in bits

settings.ca_distribution_settings · object

CA certificate distribution configuration

Show CA Distribution Settings

include_system_ca · boolean

Include system CA certificates

include_enrollment_ca · boolean

Include enrollment CA certificate

managed_cas · array

Array of CA identifiers to include

Response

Returns the created DMS object with all settings and generated ID.

Example Request

curl -X POST "https://api.lamassu.io/api/dmsmanager/v1/v1/dms" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Production DMS",
    "metadata": {
      "region": "us-east-1",
      "environment": "production"
    },
    "settings": {
      "issuance_profile_id": "profile-123",
      "enrollment_settings": {
        "protocol": "EST_RFC7030",
        "enrollment_ca": "ca-1",
        "registration_mode": "JITP",
        "verify_csr_signature": true,
        "enable_replaceable_enrollment": false
      },
      "reenrollment_settings": {
        "reenrollment_delta": "720h",
        "enable_expired_renewal": false,
        "revoke_on_reenrollment": true
      },
      "server_keygen_settings": {
        "enabled": false
      },
      "ca_distribution_settings": {
        "include_system_ca": true,
        "include_enrollment_ca": true,
        "managed_cas": []
      }
    }
  }'

---

Get DMS by ID

Retrieve detailed information about a specific DMS instance.

id · string · required

DMS identifier

Example Request

curl -X GET "https://api.lamassu.io/api/dmsmanager/v1/v1/dms/dms-123" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN"

---

Update DMS

Update an existing DMS instance. This replaces the entire DMS configuration.

id · string · required

DMS identifier

Request Body

Same structure as Create DMS. All settings will be replaced.

Example Request

curl -X PUT "https://api.lamassu.io/api/dmsmanager/v1/v1/dms/dms-123" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Updated Production DMS",
    "settings": { ... }
  }'

---

Delete DMS

Delete a DMS instance.

id · string · required

DMS identifier

Example Request

curl -X DELETE "https://api.lamassu.io/api/dmsmanager/v1/v1/dms/dms-123" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN"

Response

Returns 204 No Content on success.

---

Update DMS Metadata

Replace all metadata for a DMS instance using JSON Patch operations.

id · string · required

DMS identifier

Request Body

patches · array · required

Array of JSON Patch operations

Show Patch Operation

op · string · required

Operation type: add, remove, replace, move, copy, or test

path · string · required

JSON Pointer path to the field

value · any

Value for the operation (required for add, replace, test)

from · string

Source path for move and copy operations

Example Request

curl -X PUT "https://api.lamassu.io/api/dmsmanager/v1/v1/dms/dms-123/metadata" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "patches": [
      {
        "op": "add",
        "path": "/environment",
        "value": "staging"
      },
      {
        "op": "replace",
        "path": "/region",
        "value": "eu-west-1"
      }
    ]
  }'

---

Patch DMS Metadata

Partially update metadata for a DMS instance using JSON Patch operations.

id · string · required

DMS identifier

Request Body

Same as Update DMS Metadata.

---

Bind Identity to Device

Bind an identity certificate to a device.

Request Body

bind_mode · string · required

Binding mode specification

device_id · string · required

Device identifier

certificate_serial_number · string · required

Serial number of the certificate to bind

Response

certificate · object

Certificate details

dms · object

DMS object

device · object

Device object

Example Request

curl -X POST "https://api.lamassu.io/api/dmsmanager/v1/v1/dms/bind-identity" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "bind_mode": "explicit",
    "device_id": "device-456",
    "certificate_serial_number": "1234567890ABCDEF"
  }'